Security Affairs

SEPTEMBER 9, 2021

The massive DDoS attack that has been targeting the internet giant Yandex was powered b a completely new botnet tracked as M?ris. The record magnitude of the massive DDoS attack was also confirmed by the US company Cloudflare, which specializes in the protection against such kinds of attacks. technique for DDoS attacks.

DDOS 138

DDOS Internet Internet IoT 138

Security Affairs

DECEMBER 15, 2022

Department of Justice (DoJ) seized forty-eight domains that offered DDoS-for-Hire Service Platforms to crooks. Department of Justice (DoJ) this week announced the seizure of 48 domains associated with the DDoS-for-Hire Service platforms (aka Booter services) used by threat actors. SecurityAffairs – hacking, DDoS). cyberstress.us

DDOS 90

DDOS Internet Internet Education 90

Security Affairs

MARCH 23, 2024

An operation conducted by the Federal Criminal Police Office in Germany (BKA) and the Frankfurt cybercrime combating unit (ZIT) led to the seizure of the infrastructure of the darknet marketplace Nemesis Market in Germany and Lithuania. Crimemarket was a prominent platform for trading illegal drugs, narcotics, and cybercrime services.

Marketing 97

Marketing Cybercrime DDOS Internet 97

Security Affairs

NOVEMBER 15, 2021

Cloudflare announced to have mitigated a distributed denial-of-service (DDoS) attack that peaked at almost 2 terabytes per second (Tbps). is an American web infrastructure and website security company that provides content delivery network and DDoS mitigation services. SecurityAffairs – hacking, DDoS). Cloudflare, Inc.

DDOS 126

DDOS DNS IoT Internet 126

Security Affairs

JUNE 26, 2020

A man accused to have developed distributed denial of service (DDoS) botnets based on the Mirai botnet was sentenced to 13 months in federal prison. Schuchman compromised hundreds of thousands of IoT devices, including home routers and IP cameras, to create multiple DDoS IoT botnets that he rented to carry out the attacks.

DDOS 143

DDOS IoT Advertising Internet 143

Krebs on Security

MAY 22, 2023

Chaput said the spammers used more than 1,500 Internet addresses across 400 providers to register new accounts, which then followed popular accounts on Mastodon and sent private mentions to the followers of those accounts. Shortly after that, those same servers came under a sustained distributed denial-of-service (DDoS) attack.

Scams 243

Scams DDOS Cryptocurrency Accountability 243

Krebs on Security

JULY 25, 2023

Researchers this month uncovered a two-year-old Linux-based remote access trojan dubbed AVrecon that enslaves Internet routers into botnet that bilks online advertisers and performs password-spraying attacks. SocksEscort[.]com com , is what’s known as a “SOCKS Proxy” service.

Malware 203

Malware VPN Internet Internet 203

Security Affairs

MARCH 10, 2022

Threat actors are spreading password-stealing malware disguised as a security tool to target Ukraine’s IT Army. Cisco Talos researchers have uncovered a malware campaign targeting Ukraine’s IT Army , threat actors are using infostealer malware mimicking a DDoS tool called the “Liberator.” Pierluigi Paganini.

DDOS 84

DDOS Digital transformation Malware Advertising 84

Security Affairs

OCTOBER 3, 2019

Dutch police seized a bulletproof hosting service in a major takedown, the infrastructure was used by tens of IoT botnets involved in DDoS attacks. The servers were hosted at an unnamed data center in Amsterdam, it was used by tens of IoT botnets involved in DDoS attacks worldwide. ” continues the statement. Pierluigi Paganini.

DDOS 81

DDOS IoT Cybercrime Advertising 81

Security Affairs

JULY 23, 2023

Every week the best security articles from Security Affairs are free for you in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

DDOS 88

DDOS Hacking Spyware Surveillance 88

Security Affairs

AUGUST 28, 2023

Researchers spotted an updated version of the KmsdBot botnet that is now targeting Internet of Things (IoT) devices. The Akamai Security Intelligence Response Team (SIRT) discovered a new version of the KmsdBot botnet that employed an updated Kmsdx binary targeting Internet of Things (IoT) devices.

IoT 89

IoT DDOS Architecture Internet 89

Security Affairs

OCTOBER 30, 2021

INTERPOL published the African Cyberthreat Assessment Report 2021, a report that analyzes evolution of cybercrime in Africa. A new report published by INTERPOL, titled the African Cyberthreat Assessment Report 2021 , sheds the light on cybercrime in Africa.

Cybercrime 78

Cybercrime Scams DDOS Banking 78

Security Affairs

DECEMBER 16, 2022

Microsoft announced that a botnet dubbed MCCrash is launching distributed denial-of-service (DDoS) attacks against private Minecraft servers. Microsoft spotted a cross-platform botnet, tracked as MCCrash, which has been designed to launch distributed denial-of-service (DDoS) attacks against private Minecraft servers. ark—event[.]net

DDOS 89

DDOS IoT Malware Internet 89

Security Affairs

JUNE 17, 2023

Every week the best security articles from Security Affairs are free for you in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Margaret’s Health is the first hospital to cite a cyberattack as a reason for its closure A database containing data of +8.9

Data breaches 87

Data breaches DDOS Backups Firewall 87

Security Affairs

SEPTEMBER 12, 2021

The post Security Affairs newsletter Round 331 appeared first on Security Affairs. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. SecurityAffairs – hacking, newsletter).

DDOS 54

DDOS Banking Cybercrime Hacking 54

Security Affairs

SEPTEMBER 4, 2019

Kenneth Currin Schuchman (21) from Vancouver, Washington pleaded guilty to creating and operating multiple DDoS IoT botnet , including Satori. Kenneth Currin Schuchman (21) from Vancouver, Washington, aka Nexus Zeta, pleaded guilty to creating and operating multiple DDoS IoT botnets.

IoT 81

IoT DDOS Internet Internet 81

Security Affairs

OCTOBER 2, 2022

Germany’s Bundeskriminalamt (BKA) arrested an individual (24) suspected of having stolen €4,000,000 from internet users via phishing attacks along with a two accomplices who are suspected. Investigators believe the gang relied on DDoS-for-hire services provided by other cybercriminals.

Phishing 91

Phishing Banking DDOS Accountability 91

Security Affairs

JUNE 20, 2023

Researchers warn of an ongoing Tsunami DDoS botnet campaign targeting inadequately protected Linux SSH servers. Researchers from AhnLab Security Emergency response Center (ASEC) have uncovered an ongoing hacking campaign, aimed at poorly protected Linux SSH servers, to install the Tsunami DDoS botnet (aka Kaiten).

DDOS 82

DDOS Malware Passwords Accountability 82

Security Affairs

MAY 14, 2023

ransom Dragon Breath APT uses double-dip DLL sideloading strategy International Press Cybercrime San Bernardino County pays $1.1-million ransom Dragon Breath APT uses double-dip DLL sideloading strategy International Press Cybercrime San Bernardino County pays $1.1-million

Data breaches 88

Data breaches DDOS Artificial Intelligence Ransomware 88

Security Affairs

JULY 14, 2023

“This class of cybercrime activity threat may evade detection because it is less likely than a crypto-miner to be noticed by the owner, and it is unlikely to warrant the volume of abuse complaints that internet-wide brute-forcing and DDoS-based botnets typically draw.” ” concludes the report.

Malware 81

Malware Advertising Cybercrime Passwords 81

Security Affairs

DECEMBER 22, 2022

Microsoft Threat Intelligence Center (MSTIC) researchers discovered a new variant of the Zerobot botnet (aka ZeroStresser) that was improved with the capabilities to target more Internet of Things (IoT) devices. com) with links to the bot was among the 48 domains associated with DDoS-for-hire services seized by the FBI in December.

IoT 115

IoT DDOS Malware Firmware 115

Security Affairs

DECEMBER 11, 2022

Every week the best security articles from Security Affairs free for you in your email box. If you want to also receive for free the newsletter with the international press subscribe here. Samsung S22 hacked Sophos fixed a critical flaw in its Sophos Firewall version 19.5

Firewall 91

Firewall Banking DDOS Hacking 91

Security Affairs

SEPTEMBER 14, 2021

Last week, the Russian Internet giant Yandex has been targeting by the largest DDoS attack in the history of Runet, the Russian Internet designed to be independent of the world wide web and ensure the resilience of the country to an internet shutdown. The DDoS attack was launched by a new DDoS botnet tracked as M?ris

DDOS 78

DDOS Firewall Passwords Internet 78

Security Affairs

DECEMBER 8, 2021

The company states that the attacker can exploit the flaw only if he has access to the device network or the device has direct interface with the Internet. It tries to drop a downloader that exhibits infection behavior and that also executes Moobot, which is a DDoS botnet based on Mirai.”

Firmware 120

Firmware DDOS Malware IoT 120

Security Affairs

FEBRUARY 27, 2022

Global internet monitor working group NetBlocks reported that Twitter has been restricted in Russia amid conflict with Ukraine. February 19 – White House and UK Gov attribute DDoS attacks on Ukraine to Russia’s GRU. The White House has linked the recent DDoS attacks against Ukraine ‘s banks and defense agencies to Russia’s GRU.

DDOS 88

DDOS Banking Phishing Ransomware 88

Security Affairs

MAY 30, 2022

The botnet was first discovered by Fortinet in March, the DDoS botnet targeted several routers and web servers by exploiting known vulnerabilities. The researchers attribute the botnet to the cybercrime group Keksec which focuses on DDoS-based extortion. Upon installing the threat, the bot drops a file in /tmp/.pwned

Malware 141

Malware DDOS IoT Cybercrime 141

Security Affairs

NOVEMBER 22, 2023

Akamai discovered a new Mirai-based DDoS botnet, named InfectedSlurs, actively exploiting two zero-day vulnerabilities to infect routers and video recorder (NVR) devices. Mirai-based botnet InfectedSlurs has been spotted exploiting two zero-day RCE flaws to compromise routers and video recorder (NVR) devices.

DDOS 112

DDOS Wireless Security Intelligence Authentication 112

Security Affairs

AUGUST 20, 2022

If you want to also receive for free the newsletter with the international press subscribe here.

DDOS 75

DDOS Architecture Malware Cybercrime 75

Security Affairs

JUNE 1, 2023

The researchers warned that as of May 19, there were at least 42,000 instances of Zyxel devices on the public internet. Mirai botnets are frequently used to conduct DDoS attacks.” Internet-wide sweeps seen by over 700 of our IKEv2 aware honeypot sensors, since May 26th. ” reads the alert published by Rapid7.

Firewall 91

Firewall Firmware VPN DDOS 91

Security Affairs

OCTOBER 19, 2023

During the reporting period, key findings include: DDoS and ransomware rank the highest among the prime threats, with social engineering, data related threats, information manipulation, supply chain, and malware following.

Social Engineering 112

Social Engineering Artificial Intelligence Engineering Ransomware 112

Security Affairs

MARCH 6, 2022

Thousands of satellite internet users across Europe were disconnected from the internet by a cyber-event, experts suspect a cyber attack. March 4 – These are the sources of DDoS attacks against Russia, local NCCC warns. March 4 – Russian watchdog Roskomnadzor also blocked Facebook in Russia.

DDOS 88

DDOS Ransomware Government Phishing 88

Security Affairs

OCTOBER 12, 2021

The botnet appeared on the threat landscape in November 2020, the attacks aimed at compromising the target systems to create an IRC botnet, which can later be used to conduct several malicious activities, including DDoS attacks and crypto-mining campaigns. from visual-tools.com. CVE-2021-2900 – Genexis PLATINUM 4410 2.1 P4410-V2-1.28

DDOS 94

DDOS Surveillance Hacking Internet 94

Security Affairs

MARCH 1, 2020

Raccoon Malware, a success case in the cybercrime ecosystem. European Commission has chosen the Signal app to secure its communications. Silence Hacking Crew threatens Australian banks of DDoS attacks. Threat actors scan Internet for Vulnerable Microsoft Exchange Servers. Lampion malware v2 February 2020.

Banking 88

Banking Malware Advertising Ransomware 88

Security Affairs

SEPTEMBER 25, 2022

builder Over 39K unauthenticated Redis services on the internet targeted in cryptocurrency campaign Hackers stole $160 Million from Crypto market maker Wintermute U.S. gov adds more Chinese Telecom firms to the Covered List Imperva blocked a record DDoS attack with 25.3

Cryptocurrency 83

Cryptocurrency Data breaches DNS DDOS 83

Security Affairs

FEBRUARY 16, 2023

Once the attacker gains control of a vulnerable device in this manner, they could take advantage by including the newly compromised devices in their botnet to conduct further attacks such as DDoS.” ” concludes the report. “Therefore, it is highly recommended that patches and updates are applied when possible.”

IoT 96

IoT DDOS Encryption Malware 96

Security Affairs

DECEMBER 1, 2022

The attack chain starts with scans for the Redis server exposing port 6379 to the internet, then threat actors attempt to connect and run the following Redis commands: INFO command – this command allows adversaries to receive information about our Redis server. Follow me on Twitter: @securityaffairs and Facebook and Mastodon.

Malware 142

Malware DDOS Architecture Cryptocurrency 142

Security Affairs

AUGUST 22, 2021

million customers Adobe addresses two critical vulnerabilities in Photoshop Hamburg’s data protection agency (DPA) states that using Zoom violates GDPR Kalay cloud platform flaw exposes millions of IoT devices to hack Fortinet FortiWeb OS Command Injection allows takeover servers remotely 1.9

Data breaches 99

Data breaches Mobile Ransomware DNS 99